193.106.175.18

Classification: Whitelisted

193.106.175.18 is a whitelisted (trusted) IP address listed by Maltiverse. 51 sightings from ThreatFox Abuse.ch and Rapid7 Open Data, last seen 2026-09-06.

Current activity

  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: SOCGHOLISH (S1124)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-09-06 23:27:14 2026-09-06 23:27:14 benign hosting
FAKEUPDATES ThreatFox Abuse.ch 2023-12-19 07:17:08 2023-12-21 06:19:56 malicious-activity S1124 SocGholish
NTP Open Resolver Rapid7 Open Data 2018-12-03 05:49:08 2019-08-05 02:51:41

Tags

ntp reflection amplification open resolver monlist keitarotds socgholish port:443 fakeupdate

Whois information

AS name
AS50465 IQHost Ltd
AS registry
ripencc
AS date
2010-01-12 00:00:00
AS CIDR
193.106.175.0/24
Registrant
IQHost Ltd
City
Moscow
Postal code
109012
Country
RU — Russian Federation 🇷🇺
First indexed
2018-12-03 05:49:08
Last updated
2026-09-06 23:27:14

Malicious IPs in the same CIDR

193.106.175.35